Coverage for src/ecnl/security/__init__.py: 100%

1"""Security primitives for the ECNL MCP server. 

2 

3The package exposes a single entry point — :func:`build_token_verifier` 

4— that wires the JWKS-backed RS256 verifier used by the streamable-http 

5transport when bearer-token authentication is enabled. 

6 

7The stdio transport runs as a subprocess of its client; the trust 

8boundary is the process boundary itself, so the verifier is never wired 

9in that mode (see :mod:`ecnl.server`). 

10""" 

11 

12from .token_verifier import JWKSTokenVerifier, build_token_verifier 

13 

14__all__ = ["JWKSTokenVerifier", "build_token_verifier"]